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WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
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Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )^ Responsive to communication(s) filed on 30 April 2009 . 
2a )□ This action is FINAL. 2b)^ This action is non-final. 

3) n Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1,2,4.5 and 7-10 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) |EI Claim(s) 1.2.4.5 and 7-10 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) n Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) IZI The specification is objected to by the Examiner. 

10)n The drawing(s) filed on is/are: a)^ accepted or b)^ objected to by the Examiner. 

Applicant may not request tliat any objection to tlie drawing(s) be lield in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 
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1 Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including tlie fee set 
fortli in 37 CFR 1 .17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 30 
March 2009 has been entered. 

2. By the above submission. Claim 1 has been amended. No claims have been 
added or canceled. Claims 1, 2, 4, 5, and 7-10 are currently pending in the present 
application. 

Response to Arguments 



3. Applicant's arguments with respect to claim 1 have been considered but are moot 
in view of the new ground(s) of rejection. 
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Claim Rejections - 35 USC §103 

4. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or deschbed as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the phor art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 1, 2, 4, 5, and 7-10 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Carmon et al, WlPO Publication WO99/10180, in view of Sony 
Corporation (Kusakabe), European Patent EP 0817420, Spies et al, US Patent 
5689565, Merritt, US Patent 5475756, Gilliland et al, US Patent 4961088 (cited in the 
previous Office action), and Schneier, Applied Cryptography. 

In reference to Claim 1 , Carmon discloses a validation protocol for determining 
authenticity of a printer consumable (page 4, line 20-page 5, line 10) including the steps 
of providing a printer containing a first authentication chip and a printer consumable 
containing an second authentication chip (page 11, line 20-page 12, line 2); generating 
and encrypting a random number in the first authentication chip (page 12, lines 8-12); 
encrypting the random number in the second authentication chip (page 12, lines 9-11); 
and comparing the two encrypted random numbers, where if the two encrypted 
numbers match, then the second chip is considered to be valid and use of the 
consumable is authorized, or else the second chip is considered to be invalid and use of 
the consumable is denied (page 1 2, lines 1 3-1 5; see also page 1 1 , lines 1 0-1 2). 
However, Carmon does not explicitly disclose encryption with two different keys. 
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Sony discloses an autlientication nnetliod (see Figures 7- 9, Claim 1, and column 
2, line 49-column 3, line 17) in which a random number is generated by a random 
function (column 8, lines 12-17) and encrypted with a symmetric encryption function 
using a first key in a first apparatus (column 9, lines 13-17). The encrypted random 
number is sent to a second apparatus (column 9, lines 18-21) and decrypted with a 
symmetric decryption function using the first key (column 9, lines 31-37), and then 
encrypted with the symmetric encryption function using a second key (column 9, lines 
41-48) and sent to the first apparatus (column 9, line 57-column 1 0, line 2). The 
encrypted random number is compared with the originally encrypted random number 
(column 10, lines 29-31) after first being decrypted with the symmetric decryption 
function using the second key (column 10, lines 21-28). The two numbers matching 
authenticates the second apparatus (column 10, lines 31-35) and the two numbers not 
matching does not authenticate the second apparatus (column 10, lines 36-39). 
Therefore, it would have been obvious to modify the protocol of Carmon to use the 
specifics of the method taught by Sony, in order to authenticate an untrusted device as 
an authorized party for communication (see Sony, column 10, lines 31-35; column 14, 
lines 1 2-1 5; see also column 1 , line 57-column 2, line 48). 

Further, neither Carmon nor Sony discloses the calculation and comparison of a 
digital signature as a step of the authentication method. Spies discloses a 
cryptographic system and method that includes generating a digital signature of a 
document (column 12, lines 6-13) and encrypting the document and digital signature 
under the same symmetric encryption key in a sending device (column 12, lines 14-27, 
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noting especially the equation at line 25). Spies further discloses decrypting the 
document and signature at a receiving device (column 13, lines 15-22) and verifying the 
signature (column 13, lines 20-36). Therefore, it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify the method of 
Carmon and Sony by including the steps of generating a digital signature of the random 
number (the "document") and encrypting the signature with the random number in the 
first apparatus, and of decrypting and verifying the signature in the second apparatus, in 
order to authenticate the sending of the random number (see Spies, column 13, lines 
26-32) and more generally to allow for greater security, privacy, authenticity, and 
integrity in the system (see Spies, column 2, lines 1-4). 

Additionally, although Carmon, Sony, and Spies disclose encrypting the random 
number in the second chip and comparing the encrypted number with the number 
encrypted in the first chip (as above, at least Sony, column 9, lines 41-48; column 9, line 
57-column 1 0, line 2; and column 1 0, lines 21-39), none of Sony, Carmon, and Spies 
explicitly discloses encrypting the decrypted random number along with a memory 
vector of the second chip. Merritt discloses a method in which, as part of a mutual 
authentication operation between two devices, random numbers are encrypted along 
with a memory vector in order to produce a number that is sent along with the memory 
vector from one device to the other device to compare the encrypted numbers, where 
the memory vector is comprised of variables holding state data (see Merritt, Figure 4, 
and column 5, line 18-column 6, line 6, where the random number is encrypted along 
with a serial number and other codes, noting that the present specification explicitly 
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mentions a serial number as an example of state data). Therefore, it would have been 
obvious to one of ordinary skill in the art at the time the invention was made to further 
modify the method of Carmon, Sony, and Spies by including a memory vector in with 
the last encryption and comparison steps, in order to further facilitate secure mutual 
authentication (see Merritt, Abstract; column 1, lines 7-14; and column 2, lines 48-52; 
see also Figure 3, mutual authentication step 315). 

Further in addition, although Carmon, Sony, Spies, and Merritt disclose 
encrypting the random numbers with a memory vector composed of variables holding 
state data (as above, at least Merritt, Figure 4, and column 5, line 18-column 6, line 6), 
none of Carmon, Sony, Spies, and Merritt explicitly discloses that the variables are 
updatable consumable state data. However, Gilliland discloses a method in which 
memory vectors stored on a printer consumable include both updatable and non- 
updatable state data of the consumable, which are both verified before use of the 
consumable is allowed (see Gilliland, abstract; Figures 5 and 6; column 5, line 56- 
column 6, line 2; see also column 6, lines 35-59, where state data of the consumable is 
updated by decrementing the remaining images able to be made; see further column 6, 
lines 60-65, where an identifier such as a serial number is also stored). Therefore, it 
would have been obvious to one of ordinary skill in the art at the time the invention was 
made to further modify the method of Carmon, Sony, Spies, and Merritt, to include in 
the memory vector not only static state data such as a serial number but also updatable 
state data, in order to allow only unexpired and authorized consumables can be used 
(see Gilliland, column 2, lines 27-37, and column 5, lines 56-64) and to allow warnings 
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to be displayed to an operator indicating tliat a consumable is nearing the end of its 
useful operation (Gilliland, column 6, lines 47-59). 

Still further, although Carmon, Sony, Spies, Merritt, and Gilliland disclose that the 
random number is randomly generated (inherently) and the keys are generated 
randomly (see, for example. Spies, column 17, lines 59-61), none of Carmon, Sony, 
Spies, Merritt, or Gilliland explicitly discloses that the random function uses a seed to 
generate the random number. Schneier discloses that good keys should be generated 
using cryptographically secure pseudo-random-bit generator or a reliably random 
source (page 173, "Random Keys"). It is further well-known in the art that a linear 
feedback shift register, which takes a seed, is an example of a type of cryptographically 
secure pseudo-random-bit generator, and that the seed should be advanced 
periodically to increase security (Schneier, pages 372-379). Therefore, it would have 
been obvious to one of ordinary skill in the art at the time the invention was made to 
further modify the method of Carmon, Sony, Spies, Merritt, and Gilliland by including the 
generation of random numbers from a random generator using a seed, in order to 
realize the predictable result of increasing security by having results generated by an 
LFSR that are sufficiently random (see Schneier, page 373, third full paragraph; page 
173). 

In reference to Claim 2, Carmon as modified above further discloses that the first 
and second keys are held in both the first and second chips (see Sony, Figure 9). 

In reference to Claim 4, Carmon as modified above further discloses that the 
second chip holds a decryption function (see Sony, column 9, lines 31-37). 



Application/Control Number: 09/505,951 Page 8 

Art Unit: 2437 

In reference to Claim 5, Carmon as modified above further discloses that hash 
functions can be used in the creation of digital signatures, and specifically discloses the 
use of 160 bit hashes (Schneier, page 38, last paragraph). 

In reference to Claim 7, Carmon as modified above further discloses that the 
second chip monitors the time elapsed between steps of its processing (see Sony, 
column 10, lines 53-56). 

In reference to Claim 8, Carmon as modified above further discloses that the test 
function generating the random numbers is held in the first chip (see Sony, column 8, 
lines 12-15). Additionally, Carmon as modified above discloses that if the second chip 
is not authenticated, the authentication process is terminated (Sony, column 10, lines 
36-39). 

In reference to Claim 9, Carmon as modified above further discloses that the first 
chip monitors the time elapsed between steps of its processing (see Sony, column 10, 
lines 6-7). 

In reference to Claim 10, Carmon as modified above further discloses that it is 
determined if the second chip is valid (Carmon, page 12, lines 13-15; see also Sony, 
column 1 0, lines 31 -35) or not (Carmon, page 1 2, lines 1 3-1 5, and page 1 1 , lines 1 0-1 2; 
Sony, column 10, lines 36-39). 
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Any inquiry concerning tliis comnnunication or earlier comnnunications from tlie 
examiner sliould be directed to Zacliary A. Davis wliose teleplione number is (571)272- 
3870. Tlie examiner can normally be reached on weekdays 8:30-6:00, alternate 
Fridays off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Zachary A Davis/ 
Examiner, Art Unit 2437 



